CVE-2020-14486

MEDIUM

OpenClinic GA 5.09.02 and 5.89.05b - Improper Authorization via Redirect Bypass

Title source: llm

Description

An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which may allow unauthorized execution of commands.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01

Scores

CVSS v3 6.3

EPSS 0.0128

EPSS Percentile 66.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE

CWE-285 CWE-863

Status published

Products (2)

openclinic_ga_project/openclinic_ga 5.09.02

openclinic_ga_project/openclinic_ga 5.89.05b

Published Jul 29, 2020

Tracked Since Feb 18, 2026